lua-resty-openidc icon indicating copy to clipboard operation
lua-resty-openidc copied to clipboard

How to verify session_secret is same for all kubernetes Pods?

Open devshrm opened this issue 9 months ago • 0 comments

I am using docker-kong-oidc (which is using lua-resty-openidc) as docker image of Kong in kubernetes helm chart. Increased kubernetes Pods of kong using replicaCount to more than 1.

X_SESSION_SECRET env variable is patched into nginx_kong.lua as session_secret in the Dockerfile :

sed -i '/server_name kong;/a\ \n\ set \$session_secret "\${{X_SESSION_SECRET}}";\n\ ' "$TPL"

i am not passing any env X_SESSION_SECRET

so it means every Pod of Kong would be using different secret to encrypt the cookie ?

how to find the secret generated by lua-resty-session for encryption and decryption for each Pod ?

devshrm avatar Mar 11 '25 06:03 devshrm